Last month, the Conti ransomware gang added Snap-On Tools, a Wisconsin based company, to its data leak website. Recently, Conti posted roughly 1GB of files claimed to have been stolen during a breach against Snap-On Tools. Snap-On has not officially confirmed the source of the cyberattack and subsequent data breach, it has drafted a breach notification. The breach allegedly took place between March 1 and March 3 and was detected after the company noticed unusual activity in some areas of its computer systems environment. Snap-On immediately took the impacted systems offline.
Some of the data that may have been exposed in the attack include social security numbers, dates of birth, employee identification numbers, and more. According to Bleeping Computer, the data posted to Conti’s leak site has since been removed, with no indication as to why. This has lead some security researchers to believe Snap-On may have paid a ransom demand to Conti. Snap-On has not confirmed if it received a ransom demand, and whether those requests were met.
Read More: Infamous Conti Ransomware Gang Strikes Snap-On Tools